On Thu, Sep 24, 2020 at 7:52 AM Jared K. Smith <[email protected]> wrote: > > On Wed, Sep 23, 2020 at 7:44 PM Stephen Gallagher <[email protected]> wrote: >> >> Node’s package.json contains the license, so we should be able to just >> extract that recursively. > > > In theory, yes. In practice, some packages completely leave it out, some > packages put it under "license" and some under "licenses", and many packages > don't bother to include the license text with the code. I've filed dozens of > tickets with upstream NodeJS projects to improve these, most of which have > been ignored for years. I've come to the unfortunate conclusion that the > NodeJS community in general can't be bothered with license details. >
I have spoken to a lawyer about this in the past. We are allowed to make a "best reasonable effort" here. As long as we capture all of the known licenses and we are responsive and immediately take action if someone comes with a challenge, we should be fine. _______________________________________________ nodejs mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
